Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.mft
File: B9sjpeJVD_l0yl9BkXrIZ9UONek.mft (raw, json)
Hash identifier: UObgJYV3TNCQ468Fcvu2+qw6Ct9vg2OVhgzkSbqMojo=
Subject key identifier: 23:16:08:D5:B3:7A:F5:53:2D:C6:32:56:A2:1A:69:AE:69:E7:8C:00
Authority key identifier: 07:DB:23:A5:E2:55:0F:F9:74:CA:5F:41:91:7A:C8:67:D5:0E:35:E9
Certificate issuer: /CN=07db23a5e2550ff974ca5f41917ac867d50e35e9
Certificate serial: 019844E3523A1D25031DD89616F6DA20955E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9sjpeJVD_l0yl9BkXrIZ9UONek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.mft
Manifest number: 0939
Signing time: Sat 26 Jul 2025 04:00:05 +0000
Manifest this update: Sat 26 Jul 2025 04:00:05 +0000
Manifest next update: Sun 27 Jul 2025 04:00:05 +0000
Files and hashes: 1: 8XyUaz5PxPLue0CrUchlRmHnqJs.roa (hash: KMSpxL6wtJUNFCJFnfAUFjLMRmLQ4Dcv8f1856Q+IkY=)
2: B9sjpeJVD_l0yl9BkXrIZ9UONek.crl (hash: F/+k7E/EIZvfOdiOuFy4NMzAIdD17LTvgqKxEJxi5HM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9sjpeJVD_l0yl9BkXrIZ9UONek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:e3:52:3a:1d:25:03:1d:d8:96:16:f6:da:20:95:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07db23a5e2550ff974ca5f41917ac867d50e35e9
Validity
Not Before: Jul 26 04:00:05 2025 GMT
Not After : Jul 27 04:00:05 2025 GMT
Subject: CN=231608d5b37af5532dc63256a21a69ae69e78c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:74:b3:7c:9e:39:ae:95:ee:b8:e8:a6:e1:d2:
2b:36:a8:c3:d4:e5:cf:f7:8a:8d:3b:71:bf:39:d1:
77:43:58:47:08:db:6c:76:28:3d:5c:fe:77:a9:50:
f4:ba:ea:16:3a:c5:07:0f:46:e5:b3:f9:86:81:96:
9c:ef:67:b8:ce:5d:94:10:f8:af:34:42:09:1b:34:
f2:09:f2:5d:ba:83:bd:5f:12:28:58:cf:f3:35:db:
2c:54:f2:c4:31:09:db:49:a1:97:68:91:42:af:fd:
a2:10:be:da:b5:2b:22:03:3d:80:47:30:93:d5:5e:
7c:44:9f:55:d9:c3:18:cb:58:a4:51:cf:ca:27:49:
fe:b0:f8:b9:b6:0c:6e:83:47:9a:f0:ac:70:eb:1a:
3e:44:59:2f:a2:61:31:05:78:48:37:70:db:af:dc:
56:c6:55:7d:b6:43:8a:b9:29:1a:cf:2d:41:aa:66:
e0:86:ce:65:5f:01:00:d2:e6:8e:88:e6:a7:f9:3a:
cf:e7:34:5a:37:b0:84:89:b0:77:d1:5a:41:8e:b6:
70:0a:a7:d7:56:48:05:72:54:b5:13:06:c8:28:3b:
28:cf:2e:47:b6:e2:a5:5d:b4:19:9e:08:e2:7c:98:
2c:2d:e1:2a:54:e4:d6:ed:ed:3a:5a:c6:90:d4:92:
18:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:16:08:D5:B3:7A:F5:53:2D:C6:32:56:A2:1A:69:AE:69:E7:8C:00
X509v3 Authority Key Identifier:
keyid:07:DB:23:A5:E2:55:0F:F9:74:CA:5F:41:91:7A:C8:67:D5:0E:35:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9sjpeJVD_l0yl9BkXrIZ9UONek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:df:09:68:a0:83:be:90:59:19:db:0f:33:42:0b:2e:33:9e:
87:f4:27:68:86:17:9d:4b:b3:d0:0c:bf:7f:19:cb:da:de:d5:
33:b9:db:cb:c7:dd:24:d9:98:8f:9d:74:8f:a2:82:b6:05:60:
36:fa:05:b3:67:f8:52:46:bb:ba:14:3a:6a:af:21:f6:d4:90:
6b:80:07:bf:4d:b2:fe:15:f5:f3:eb:bb:4b:be:36:5b:e8:d1:
a0:87:ee:16:18:37:c2:c2:09:80:69:78:8d:f5:ef:e5:9a:e1:
c3:88:99:82:87:f3:70:fa:e0:f9:68:af:b0:b1:48:e1:53:7a:
87:41:b1:1a:83:cf:d7:9c:43:57:f3:86:1c:6a:e7:d0:dc:1c:
58:5f:b2:7c:84:a1:3f:73:55:05:a5:c1:7d:ed:27:24:85:fa:
91:22:d1:d9:70:8c:a7:58:04:7c:87:fa:c5:f1:fc:78:ad:c8:
b8:02:7f:0e:73:f0:78:43:27:c2:68:b4:42:37:98:c1:1a:57:
ab:86:9c:d4:d8:13:2d:43:7d:ec:32:10:61:28:97:7f:7b:e9:
d8:01:ed:7e:04:93:59:3c:6d:c4:6d:b6:2c:77:64:ef:7a:aa:
e2:d8:59:83:bc:3d:21:aa:21:b8:60:03:e2:ff:e2:a5:4c:2b:
43:d5:77:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhE41I6HSUDHdiWFvbaIJVeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZGIyM2E1ZTI1NTBmZjk3NGNhNWY0MTkxN2FjODY3ZDUw
ZTM1ZTkwHhcNMjUwNzI2MDQwMDA1WhcNMjUwNzI3MDQwMDA1WjAzMTEwLwYDVQQD
EygyMzE2MDhkNWIzN2FmNTUzMmRjNjMyNTZhMjFhNjlhZTY5ZTc4YzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHSzfJ45rpXuuOim4dIrNqjD1OXP
94qNO3G/OdF3Q1hHCNtsdig9XP53qVD0uuoWOsUHD0bls/mGgZac72e4zl2UEPiv
NEIJGzTyCfJduoO9XxIoWM/zNdssVPLEMQnbSaGXaJFCr/2iEL7atSsiAz2ARzCT
1V58RJ9V2cMYy1ikUc/KJ0n+sPi5tgxug0ea8Kxw6xo+RFkvomExBXhIN3Dbr9xW
xlV9tkOKuSkazy1Bqmbghs5lXwEA0uaOiOan+TrP5zRaN7CEibB30VpBjrZwCqfX
VkgFclS1EwbIKDsozy5HtuKlXbQZngjifJgsLeEqVOTW7e06WsaQ1JIYawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCMWCNWzevVTLcYyVqIaaa5p54wAMB8GA1UdIwQY
MBaAFAfbI6XiVQ/5dMpfQZF6yGfVDjXpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjlzanBlSlZEX2wweWw5QmtYcklaOVVPTmVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8wMzA1Y2QtMGQ3MS00MjBhLWJlMzgt
NWNjZDVlOWNlMDA0LzEvQjlzanBlSlZEX2wweWw5QmtYcklaOVVPTmVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi8wMzA1Y2QtMGQ3MS00MjBhLWJlMzgtNWNjZDVlOWNlMDA0
LzEvQjlzanBlSlZEX2wweWw5QmtYcklaOVVPTmVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW98JaKCD
vpBZGdsPM0ILLjOeh/QnaIYXnUuz0Ay/fxnL2t7VM7nby8fdJNmYj510j6KCtgVg
NvoFs2f4Uka7uhQ6aq8h9tSQa4AHv02y/hX18+u7S742W+jRoIfuFhg3wsIJgGl4
jfXv5Zrhw4iZgofzcPrg+WivsLFI4VN6h0GxGoPP15xDV/OGHGrn0NwcWF+yfISh
P3NVBaXBfe0nJIX6kSLR2XCMp1gEfIf6xfH8eK3IuAJ/DnPweEMnwmi0QjeYwRpX
q4ac1NgTLUN97DIQYSiXf3vp2AHtfgSTWTxtxG22LHdk73qq4thZg7w9IaohuGAD
4v/ipUwrQ9V3DQ==
-----END CERTIFICATE-----
Generated at Sat Jul 26 06:57:20 2025 by rpki-client